Privacy Policy

1. Who is the data controller

The data controller responsible for processing personal data collected through this website is:

SPACEO, Lda.
Matosinhos, Portugal
Email: info@spaceo.pt
Phone: (+351) 220 30 1586

2. What data we collect

We collect as little personal data as possible to run this website and respond to enquiries. Specifically:

Data	When	Source
Name, email address, and message content	When you email us or apply for a role via a mailto link	Provided directly by you
IP address, browser type, device type, pages visited, referring URL, approximate location, session duration	Automatically, while browsing this site	Google Analytics (see Section 4)
CV, cover letter, and any details you choose to include	When you apply for an open position	Provided directly by you

We do not run e-commerce or payment processing on this website, and we do not knowingly collect data from children.

3. Legal basis and purpose

Purpose	Legal basis (GDPR Art. 6(1))
Responding to enquiries sent by email	(b) necessary to take steps prior to a contract, or (f) our legitimate interest in answering enquiries
Reviewing job applications	(b) necessary to take steps prior to a contract of employment
Website analytics (Google Analytics)	(a) your consent, collected via the cookie choice described in Section 4
Complying with legal obligations (e.g. accounting, tax)	(c) legal obligation

4. Cookies and analytics

This website uses Google Analytics (property ID G-M91ZSPW4NN), provided by Google Ireland Limited, to understand how visitors use the site — for example, which pages are viewed and for how long. Google Analytics sets cookies and processes data such as your IP address (truncated), device and browser type, and browsing behaviour on this site.

You can opt out of Google Analytics tracking on this website at any time: disable Google Analytics for this site. This sets an opt-out cookie in your browser. You can also install Google's browser opt-out add-on, or block cookies entirely in your browser settings — though this may affect how the site functions.

We do not use advertising cookies, retargeting pixels, or sell any data collected through this website.

5. Who we share data with

We do not sell personal data. We share data only with:

• Google Ireland Limited — as our website analytics processor (see Section 4).
• Our email and hosting providers — to the extent necessary to operate this website and receive your messages.
• Public authorities — where required by law (for example, tax or employment-law obligations).

6. International transfers

Google Analytics may transfer data to servers located outside the European Economic Area, including the United States. Where this happens, Google relies on the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses as a safeguard. No other international transfer of personal data occurs through this website.

7. How long we keep data

• Enquiries and general correspondence: kept for as long as needed to handle the enquiry, and up to 2 years afterward for reference, unless you ask us to delete it sooner.
• Job applications: kept for up to 12 months after the recruitment process closes, so we can consider you for future openings, unless you object.
• Analytics data: retained by Google Analytics for up to 14 months, per our account configuration, then automatically deleted.

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure of your data ("right to be forgotten");
• Restrict or object to certain processing, including analytics;
• Request a portable copy of data you provided to us;
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at info@spaceo.pt. We will respond within one month, as required by law.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with Portugal's supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1º, 1200-651 Lisboa, Portugal
www.cnpd.pt

9. Security

We use reasonable technical and organisational measures — including HTTPS encryption in transit — to protect the data we handle. No method of transmission or storage is completely secure, but we work to keep personal data protected against unauthorised access, alteration, or loss.

10. Changes to this policy

We may update this policy from time to time, for example if we change the tools we use or as data protection law evolves. The date at the top of this page reflects the latest revision. Material changes will be reflected here before they take effect.

11. Contact

Questions about this policy or how we handle your data can be sent to info@spaceo.pt.